Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AIcnTVxvmzNE1JxzWMfJ2t3z7Tk.cer
File:                     AIcnTVxvmzNE1JxzWMfJ2t3z7Tk.cer (raw, json)
Hash identifier:          7PLsi8jr+wDs4qihcLafwje0YVEmNEXjS4XhvFBsWTE=
Subject key identifier:   00:87:27:4D:5C:6F:9B:33:44:D4:9C:73:58:C7:C9:DA:DD:F3:ED:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7D2B4E3F29
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/16/5dcd34-72af-4ca2-90fb-ddd365de6324/1/AIcnTVxvmzNE1JxzWMfJ2t3z7Tk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/16/5dcd34-72af-4ca2-90fb-ddd365de6324/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:20:22 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 39785
                          AS: 50442
                          IP: 109.95.192.0/21
                          IP: 2001:67c:e8::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537597460265 (0x7d2b4e3f29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:20:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0087274d5c6f9b3344d49c7358c7c9daddf3ed39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:75:25:10:8c:68:83:2f:8f:0d:47:2b:7f:
                    df:f1:df:35:4a:66:3f:b2:e8:f6:8d:7c:1f:69:ed:
                    e2:7e:cb:2c:7f:d7:b3:45:3f:f0:23:c3:b2:da:0f:
                    1f:fe:ff:0f:89:85:11:f4:fc:1b:bf:e5:fc:94:5c:
                    b1:78:51:4c:92:6f:07:14:e5:ef:cd:72:3b:ff:06:
                    40:54:79:3f:86:33:e6:3d:15:46:26:0c:95:b6:08:
                    16:ac:eb:bc:db:26:89:96:29:b6:7e:6c:d6:72:56:
                    8b:87:eb:fe:5e:bb:a8:e0:9b:95:1a:b8:92:71:77:
                    17:0e:ec:c8:45:2b:31:d4:23:15:7c:b5:00:b1:50:
                    5f:05:9e:2a:73:b9:03:3f:0b:ec:2a:9f:8e:d4:03:
                    9a:f1:6b:76:25:3b:cd:95:bd:80:9c:69:47:05:93:
                    33:97:4d:69:37:27:c1:9c:3d:88:6a:13:5f:70:47:
                    90:eb:a1:ba:cd:f6:ac:06:25:ba:3d:d8:23:da:32:
                    9f:c1:fb:3a:8f:a2:b1:58:77:66:7b:c5:31:b5:72:
                    ca:f4:76:aa:c5:1b:5d:33:85:d4:1d:fb:d2:ad:f2:
                    38:6c:a9:65:6b:4a:49:28:2d:96:e3:9f:a6:f7:d3:
                    80:65:44:9c:15:a8:c3:da:2c:3c:bd:cc:8e:14:58:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:87:27:4D:5C:6F:9B:33:44:D4:9C:73:58:C7:C9:DA:DD:F3:ED:39
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5dcd34-72af-4ca2-90fb-ddd365de6324/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5dcd34-72af-4ca2-90fb-ddd365de6324/1/AIcnTVxvmzNE1JxzWMfJ2t3z7Tk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.95.192.0/21
                IPv6:
                  2001:67c:e8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39785
                  50442

    Signature Algorithm: sha256WithRSAEncryption
         02:4a:d2:ac:77:fe:db:a9:20:fd:81:f6:ec:a0:f8:f1:79:4b:
         2a:6a:e5:34:e2:e7:35:b1:c8:ed:c7:54:ac:a4:ea:c9:d7:c9:
         73:dc:2d:47:a2:7c:f4:cd:5a:c0:a6:7e:d1:ab:7b:2c:54:4f:
         3e:9b:62:5a:3e:2b:bc:6b:fd:28:0f:74:44:47:8b:02:a1:c5:
         c6:e0:6b:18:d8:bd:04:60:4f:c6:73:ae:92:6e:6d:0f:38:89:
         60:45:b5:ea:54:18:68:d3:58:4d:f7:ee:5d:7f:fc:70:44:10:
         6e:d1:2e:61:d8:bd:6b:6b:21:7f:5a:ad:c9:62:c9:85:69:3c:
         e6:12:7f:ee:a2:40:10:7a:12:85:00:b5:8e:e8:ba:91:b9:90:
         16:9d:a2:73:e8:14:de:a0:b8:6d:6b:39:56:25:29:17:c8:9a:
         6f:d9:f5:a7:e6:d8:d6:23:3c:d3:2b:7b:91:86:f5:ef:8a:a1:
         98:9f:38:2d:39:b0:7d:1d:a5:37:e9:18:15:ae:a9:6d:4a:2c:
         82:d0:d3:8d:63:e5:ca:4a:47:d4:48:06:b7:8d:cf:16:80:6c:
         e9:94:26:a5:38:f1:58:67:8e:e5:e3:c7:50:4b:c4:bf:ec:3c:
         42:ba:48:30:22:df:fd:52:af:1a:07:94:68:18:63:19:c3:41:
         f2:af:b7:14
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIFfStOPykwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzIwMjJaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDAwODcyNzRkNWM2
ZjliMzM0NGQ0OWM3MzU4YzdjOWRhZGRmM2VkMzkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCXV3UlEIxogy+PDUcrf9/x3zVKZj+y6PaNfB9p7eJ+yyx/
17NFP/Ajw7LaDx/+/w+JhRH0/Bu/5fyUXLF4UUySbwcU5e/Ncjv/BkBUeT+GM+Y9
FUYmDJW2CBas67zbJomWKbZ+bNZyVouH6/5eu6jgm5UauJJxdxcO7MhFKzHUIxV8
tQCxUF8FnipzuQM/C+wqn47UA5rxa3YlO82VvYCcaUcFkzOXTWk3J8GcPYhqE19w
R5DrobrN9qwGJbo92CPaMp/B+zqPorFYd2Z7xTG1csr0dqrFG10zhdQd+9Kt8jhs
qWVrSkkoLZbjn6b304BlRJwVqMPaLDy9zI4UWEqlAgMBAAGjggK2MIICsjAdBgNV
HQ4EFgQUAIcnTVxvmzNE1JxzWMfJ2t3z7TkwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvNWRjZDM0LTcyYWYtNGNhMi05
MGZiLWRkZDM2NWRlNjMyNC8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi81ZGNkMzQtNzJhZi00Y2EyLTkw
ZmItZGRkMzY1ZGU2MzI0LzEvQUljblRWeHZtek5FMUp4eldNZkoydDN6N1RrLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwE
AgABMAYDBANtX8AwDwQCAAIwCQMHACABBnwA6DAfBggrBgEFBQcBCAEB/wQQMA6g
DDAKAgMAm2kCAwDFCjANBgkqhkiG9w0BAQsFAAOCAQEAAkrSrHf+26kg/YH27KD4
8XlLKmrlNOLnNbHI7cdUrKTqydfJc9wtR6J89M1awKZ+0at7LFRPPptiWj4rvGv9
KA90REeLAqHFxuBrGNi9BGBPxnOukm5tDziJYEW16lQYaNNYTffuXX/8cEQQbtEu
Ydi9a2shf1qtyWLJhWk85hJ/7qJAEHoShQC1jui6kbmQFp2ic+gU3qC4bWs5ViUp
F8iab9n1p+bY1iM80yt7kYb174qhmJ84LTmwfR2lN+kYFa6pbUosgtDTjWPlykpH
1EgGt43PFoBs6ZQmpTjxWGeO5ePHUEvEv+w8QrpIMCLf/VKvGgeUaBhjGcNB8q+3
FA==
-----END CERTIFICATE-----